blueprint-sync-ids
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's operations are confined to the local project documentation directories (docs/prds, docs/adrs, etc.) and follow the stated purpose of ID management and registry synchronization.
- [COMMAND_EXECUTION]: Shell commands used for parsing (grep, sed, head) and registry updates (jq) use proper quoting and parameter handling (e.g., jq --arg) to ensure safety. The use of the GitHub CLI (gh) for issue creation is a standard administrative task and requires user confirmation via the AskUserQuestion tool.
- [SAFE]: No evidence of hardcoded credentials, sensitive file access, persistence mechanisms, or unauthorized network communication was found.
Audit Metadata